Abstract:Since the traditional web service identification methods are highly depended on the differences of server software implementation, unfavorable to expand to other terminal devices, a kind of proactive identification framework with double factors for cyberspace terminal device is proposed. The framework analyzed the network fingerprint characteristics of terminal device from perspectives of banner and web fingerprint. Firstly, banner information of web service in terminal device is mined from “Server” field and “WWW-Authenticate” field and HTML source code in HTTP packet header; secondly, web fingerprint of terminal device wasis extracted from image files and text files; meanwhile, it analyzes the effectiveness as well as advantages and disadvantages according to the specific cases. The results show that the framework solves the problems of extracting banner information simply and being limited by the differences of server software implementation in traditional identification methods. Finally, it summarizes research results and discusses future improvements of the framework.